> Your tcpdump uses a user level bpf implemented in the libpcap. If you
> take a look at the latest kernel source 2.1.125 you will see that there
> is no option in setsockopt for adding a packet filter to a SOCK_PACKET
> type.
First check who wrote/rewrote PF_PACKET (and a very big part of the rest
of the LL/DL code) in 2.1. Then SO_ATTACH_FILTER/
SO_DETACH_FILTER are generic socket options that are handled by
core/sock.c for all socket types, the receiving filter is in include/net/sock.h
(that is what I missed in my first mail).
-Andi
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/